Envoy Passport 设计错误漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2018-17499
• https://cve.imfht.com/detail/CVE-2018-17500?lang=en
• https://strobes.co/vi/cve/CVE-2018-17500
• https://exchange.xforce.ibmcloud.com/vulnerabilities/149659
• https://cve.imfht.com/product/Envoy%20Passport%20for%20iPhone?lang=en
• https://www.scworld.com/news/flaws-in-visitor-management-systems-could-roll-out-welcome-mat-for-attackers
• https://avd.aliyun.com/detail?id=AVD-2018-17499

Related Vulnerabilities

• PoC泛微E-cology10 /papi/passport/appnew/login/appLogin 未授权访问漏洞
• PoClaravel-passport-keys-exposed: Laravel Passport - OAuth2 Keys Exposed
• 智慧芽-知识产权信息管理系统 /innoe-passport/sso/get_token_by_account 未授权访问漏洞
• Walle Devops /api/passport/login 默认口令漏洞
• SecurEnvoy MFA /secserver/ LDAP 注入漏洞（CVE-2024-37393）
• PoCCVE-2024-37393: SecurEnvoy Two Factor Authentication - LDAP Injection
• PoCbaidu-passport-csp-bypass: Content-Security-Policy Bypass - Baidu Passport
• PoCenvoy-admin-exposure: Envoy Admin Exposure
• 金蝶云星空 /Kingdee.BOS.ServiceFacade.ServicesStub.User.UserService.SaveUserPassport.common.kdsvc 代码执行漏洞
• OneBlog博客 /passport/login 反序列化漏洞